redact vcenter pw from logs

internal/settings/settings.go

@@ -89,7 +89,10 @@ func (s *Settings) ReadYMLSettings() error {
 		return fmt.Errorf("unable to decode settings file : '%s'", err)
 	}
 
-	s.Logger.Debug("Updating settings", "settings", settings)
+	// Avoid logging sensitive fields (e.g., credentials).
+	redacted := settings
+	redacted.Settings.VcenterPassword = "REDACTED"
+	s.Logger.Debug("Updating settings", "settings", redacted)
 	s.Values = &settings
 
 	return nil